I am working on a packed file with UPX.
In one of the lines it calls to the value of the address
0xF5222C which is:
The debugger auto-completes it to
Where can I verify that this is the address of the function?
I looked at the "Memory Map" tab but all I can see is the address (
0x777F000) of the kernel32.dll module:
Is there a place I can view the addrresses of all the functions related to a specific module?
Search for > All Modules > Intermodlar calls:
I searched for
0x778057c0) but it doesn't find it: